Fix authentication for competition API

Check to see if the user is logged in to a session instead of
immediately requiring HTTPBasicAuth stuff.